Oracle E-Business Suite iSupport Component Vulnerability
CVE-2019-2829

8.2HIGH

Key Information:

Vendor

Oracle
Status
Isupport
Vendor
CVE Published:
23 July 2019

What is CVE-2019-2829?

A vulnerability exists in the iSupport component of Oracle E-Business Suite, impacting multiple versions. This issue allows an unauthenticated attacker with network access to exploit the system via HTTP, necessitating human interaction to succeed. Although primarily located within Oracle iSupport, successful exploitation can lead to unauthorized access to sensitive information and the ability to manipulate Oracle iSupport data, including updates and deletions. Organizations using affected versions should take immediate action to assess and mitigate potential risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

iSupport 12.1.1 - 12.1.3

iSupport 12.2.3 - 12.2.8

References

http://www.oracle.com/technetwork/security-advisory/cpuju...
x_refsource_MISC

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.